DescriptionCheck for phi-uses of arguments object before eliminating dead phi's.
HGraphBuilder::TryArgumentsAccess does not emit any uses for receiver and will generate incorrect code when receiver for a property access is defined by a phi that returns either arguments object or something else.
BUG=v8:1582
TEST=test/mjsunit/regress/regress-1582.js
Committed: http://code.google.com/p/v8/source/detail?r=8774
Patch Set 1 #
Total comments: 2
Messages
Total messages: 3 (0 generated)
|